Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          JTcxeOKLxvs2qHCIiiMAPgEQnK9GKHHKkl4Q/uS0kFU=
Subject key identifier:   98:D5:97:D3:78:7C:E9:A4:1D:BE:0C:AC:52:C9:B1:25:BF:0F:23:97
Certificate issuer:       /CN=199E6A493967FE55BA0140061BC6435DD8779FD9
Certificate serial:       6270BA8378186DAE0D983A33214142CDA91CCDE2
Authority key identifier: 19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Fri 17 Oct 2025 12:00:26 +0000
ROA not before:           Fri 17 Oct 2025 11:55:26 +0000
ROA not after:            Fri 16 Oct 2026 12:00:26 +0000
asID:                     267991
IP address blocks:        2804:5654:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:70:ba:83:78:18:6d:ae:0d:98:3a:33:21:41:42:cd:a9:1c:cd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199E6A493967FE55BA0140061BC6435DD8779FD9
        Validity
            Not Before: Oct 17 11:55:26 2025 GMT
            Not After : Oct 16 12:00:26 2026 GMT
        Subject: CN=98D597D3787CE9A41DBE0CAC52C9B125BF0F2397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:86:0c:7b:32:4e:1a:80:25:d8:b5:47:25:78:
                    88:d4:ea:00:80:fd:3a:4f:20:c8:eb:39:7a:7b:97:
                    26:8e:f6:2d:0e:1b:98:66:5f:71:86:92:33:2e:b6:
                    97:24:fc:f6:3f:ec:98:a2:f7:52:51:cd:e3:a5:9c:
                    72:cf:1b:09:3a:84:1a:d7:2f:4d:1c:5a:0f:21:79:
                    b5:d8:8d:9c:e7:cf:62:4e:58:30:2c:18:61:ad:19:
                    82:e3:35:5e:a1:1c:79:8b:55:65:5f:66:6e:f8:cd:
                    b0:36:4a:25:73:84:6d:78:30:45:f2:8e:ee:5b:ff:
                    d0:0f:71:15:81:59:74:0a:2e:8c:3a:c0:d0:69:2e:
                    57:1d:bc:b5:cd:27:f1:66:00:42:d2:0d:c6:05:62:
                    10:4a:dc:8b:b4:bf:3c:72:12:16:01:4f:a4:6d:a8:
                    bd:7a:6e:58:bf:64:19:92:4e:8e:b4:7a:2e:43:30:
                    9d:f0:49:d4:b6:65:f5:6c:42:ec:43:85:bb:a4:63:
                    e5:40:88:92:6a:2b:04:25:2e:ec:f8:de:f5:95:e4:
                    1c:da:01:5c:25:52:b8:1d:6d:57:f7:76:79:19:8a:
                    15:f3:11:37:b9:22:10:a2:b0:2d:61:7f:b2:fd:85:
                    a5:da:33:09:ea:09:06:ca:65:cd:bd:ad:24:11:5f:
                    17:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D5:97:D3:78:7C:E9:A4:1D:BE:0C:AC:52:C9:B1:25:BF:0F:23:97
            X509v3 Authority Key Identifier:
                keyid:19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         96:6c:eb:71:7e:fd:e4:51:bd:8d:b1:ae:23:59:cc:17:a8:39:
         27:c7:b4:8c:0a:68:98:f8:ab:f0:cf:61:fb:70:f3:de:7d:37:
         8a:1b:e9:ff:57:0b:e7:36:ab:2e:d4:03:5a:ae:06:b7:68:69:
         1b:4f:98:b3:0c:a5:cd:16:a6:52:f8:4e:da:90:b0:21:f4:51:
         c4:19:d7:ac:ec:b9:18:f8:e4:32:bd:52:46:81:77:57:5d:f7:
         8d:ed:da:78:60:b0:e4:07:dc:a0:47:66:f1:88:64:e1:62:f5:
         4a:e9:18:f2:dd:b6:25:36:72:d2:91:c6:1e:3a:20:d5:ba:11:
         34:87:34:66:b8:d1:1a:19:a0:45:6b:ee:a2:1f:f7:d4:00:81:
         e1:d1:85:93:cc:fc:ce:70:1d:74:ed:c6:56:c6:e9:48:5a:4d:
         93:60:4a:3f:ad:2b:2e:48:0d:5f:bc:91:cc:60:40:59:83:b0:
         7d:c3:62:bd:96:68:0f:2a:5f:e7:32:fa:93:c6:60:6f:47:65:
         ca:39:ec:b5:a8:c1:c5:0f:8a:83:12:33:6a:7e:98:51:09:f6:
         3b:94:34:4d:08:5f:25:7d:5c:80:42:c8:ac:72:2a:ae:7c:55:
         5a:f6:3b:4c:00:28:89:45:e2:d5:d1:74:ea:56:4c:22:aa:72:
         1f:83:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:39:52 2025 by rpki-client